Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: G+nvMnlkz0iLXeg+4ocKo+vwyffpTNg5DZUaG24GZJM=
Subject key identifier: 94:FF:61:03:0F:10:DE:03:1C:42:DE:4B:DD:F9:7F:20:1A:B9:CC:7B
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0197B77C0B6022807FED2A90D5260C48F35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 03C0
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: J/MI1MNurk9lOOfkp/U5uvjrDJUkHVHmSgWOACnesws=)
2: hXFvDfauLNPAF9WisFevrAfOB1o.roa (hash: +PM39yo15WknA3d/avFILeomoy0TBmCYWA48pwr5g+I=)
3: si-C49_gCXDqHgV15BpjmdVSEiE.roa (hash: M/s+DA7HYj5VOC6CBgokuKGD9N5LSw7UMOrHEdp5Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0b:60:22:80:7f:ed:2a:90:d5:26:0c:48:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=94ff61030f10de031c42de4bddf97f201ab9cc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:cf:c5:82:de:38:63:e5:05:2f:5f:07:e6:
cd:ed:53:af:af:9d:8c:da:45:7a:c2:20:a3:85:1f:
b1:9b:4d:0d:45:1f:bd:bb:f2:25:a9:60:ae:a6:a5:
74:84:b1:cb:96:1f:c8:64:62:d0:0a:26:a3:e6:cf:
6c:e1:ea:b5:e0:d9:01:dd:67:de:40:96:12:4c:6b:
91:fc:64:fd:b5:c4:64:2e:55:c9:20:3a:f0:47:86:
9e:04:af:4a:db:ee:f4:51:2d:2e:97:10:fd:99:cc:
55:ee:24:5e:79:26:11:54:19:16:be:15:1e:ae:1d:
f0:14:8c:09:f9:77:5e:62:c9:46:29:1c:fc:96:a9:
81:9e:b1:10:c9:03:3a:eb:65:25:fb:7c:d2:f9:78:
88:f4:1f:f9:85:9e:f4:92:03:62:13:92:ab:27:c4:
41:15:5d:19:36:26:d1:0f:d5:75:b7:78:8d:b0:b6:
6d:a5:f2:4c:66:95:7e:90:a0:58:37:dd:5b:4f:8a:
28:6b:cd:ea:30:ba:35:97:ec:28:3c:07:4c:86:85:
58:d4:de:98:6c:63:c5:42:ce:f2:6d:c1:c9:62:45:
06:5a:27:87:ad:bb:7b:1c:53:24:98:88:a3:3a:f3:
ad:c0:c1:e1:35:9a:83:d7:4a:b5:0f:f0:b5:cd:22:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:61:03:0F:10:DE:03:1C:42:DE:4B:DD:F9:7F:20:1A:B9:CC:7B
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b3:1e:f9:07:e2:08:fd:de:08:d4:66:21:1b:0e:9d:51:ca:
b3:5a:48:4a:a2:5b:e9:08:0f:8c:b2:25:2e:8b:3a:a1:b0:37:
77:16:8a:60:7d:cf:82:09:0a:3c:db:33:a9:c1:fb:1b:33:2e:
ee:fb:cf:0f:be:6d:60:d6:41:0a:c4:61:6f:22:b3:32:86:2b:
de:b2:2f:94:56:03:9e:3b:0b:29:62:ff:95:c1:d3:54:b3:59:
59:1c:37:99:17:34:3f:07:2b:1a:ca:5c:1e:03:2e:7c:c9:18:
7f:1e:ba:81:74:6e:c8:16:5f:a7:b2:ef:72:45:f4:a5:33:ee:
c2:83:f4:4e:02:06:22:5f:d5:72:ea:81:cb:82:8f:5a:ce:20:
b6:72:41:29:90:a1:80:b6:fa:b7:df:fd:63:50:4d:81:5d:06:
02:8d:dc:39:76:27:56:f9:e2:56:bf:a6:ba:e6:4f:d4:f6:4c:
85:6d:a3:5a:81:56:aa:8c:6c:b2:28:5e:cb:d4:70:96:98:cc:
63:7d:df:04:eb:6b:75:a1:2d:93:4e:b6:ae:e9:e6:44:b9:b7:
bf:ce:02:d1:0a:2a:02:8b:c8:ca:d0:9d:6a:8d:bf:52:8d:23:
80:aa:62:38:92:be:75:81:6b:2e:ef:65:ed:f0:66:42:5e:c5:
61:bc:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:32 2025 by rpki-client